Privacy

Privacy policy

As of: May 2026

1. Controller

Vacondi Publishing SL

C/ Gremi de Sabaters 21

07009 Palma, España

Spain

NIF/CIF: B24996431

Email: hola@vacondi.com

(hereinafter "Publisher", "we" or "us")

2. Principles and legal bases

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law, in particular Organic Law 3/2018 (LOPDGDD).

We only collect data that is necessary for the respective purpose. Data is shared with third parties only where required for contract performance, prescribed by law, or expressly consented to by you.

3. Website hosting via Framer

Our website is operated via Framer (Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands).

As our processor, Framer processes technically necessary connection data when you visit our website (including IP address, timestamp, pages accessed, browser and device data) on its servers. Processing serves to operate and deliver the website.

The legal basis is Art. 6(1)(b) GDPR (contract performance or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation).

Framer may process data on servers within the EU and in the USA. Where transfer to a third country occurs, this is based on the EU Commission's standard contractual clauses. Further information is available in Framer's privacy statement at: https://www.framer.com/legal/privacy-statement/

4. Web analytics with Plausible

We use Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia) to analyse use of our website.

Plausible is a privacy-friendly analytics tool. No cookies are set and no personal data is stored. Plausible only collects aggregated usage statistics (e.g. pages viewed, time on site, broad regional origin) based on fully anonymised data. Identification of individuals is not possible.

As no personal data is processed, the GDPR does not apply to this service. Consent is not required.

Further information is available at: https://plausible.io/data-policy

5. User account and registration

If you register on our platform, we process the data you provide (e.g. email address, chosen username) to set up and manage your account.

The legal basis is Art. 6(1)(b) GDPR (contract performance).

Your access credentials are stored in encrypted form. We do not share your account data with third parties unless required for contract performance or prescribed by law.

6. Merchandise orders

When you place an order in our shop, we process data required to fulfil the contract, in particular name, delivery address, email address, and payment information.

To process and deliver the order, we share necessary data with our fulfilment partners (in particular Printful). These service providers are contractually obliged to comply with data protection requirements.

The legal basis is Art. 6(1)(b) GDPR.

7. Newsletter

If you subscribe to our newsletter, we process your email address on the basis of your express consent (Art. 6(1)(a) GDPR) to send you our promotional information. Registration uses a double opt-in process.

You may withdraw your consent at any time with effect for the future, in particular by clicking the unsubscribe link in the newsletter or by contacting hola@vacondi.com.

8. Contact

If you contact us by email or via a contact form, we process your details to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

9. Storage period

We store personal data only for as long as necessary for the respective processing purpose or where statutory retention obligations exist. Order data is generally stored for the duration of statutory retention periods (typically ten years after the end of the financial year).

10. Your rights as a data subject

You have the following rights regarding your personal data:

To exercise your rights, please contact: hola@vacondi.com

You also have the right to lodge a complaint with the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es. Depending on your habitual residence, place of work, or place of an alleged infringement, you may also contact the data protection authority of your EU member state.

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

11. No automated decision-making

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

12. Changes to this privacy policy

We reserve the right to amend this privacy policy when our data processing practices change or when legislation changes. The current version is available on our website.